Skip to contentRed Hat Enterprise Linux 9.6 Extended Update Support vulnerabilities
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 morePrivilege escalation in the Messaging System componentCVE-2026-2777Fix available9.8 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreSandbox escape due to incorrect boundary conditions in the Telemetry component in External SoftwareCVE-2026-2776Fix available10.0 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreMitigation bypass in the DOM: HTML Parser componentCVE-2026-2775Fix available9.8 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreInteger overflow in the Audio/Video componentCVE-2026-2774Fix available9.8 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreIncorrect boundary conditions in the Web Audio componentCVE-2026-2773Fix available9.8 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreUse-after-free in the Audio/Video: Playback componentCVE-2026-2772Fix available9.8 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreUndefined behavior in the DOM: Core & HTML componentCVE-2026-2771Fix available9.8 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreUse-after-free in the DOM: Bindings (WebIDL) componentCVE-2026-2770Fix available9.8 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreUse-after-free in the Storage: IndexedDB componentCVE-2026-2769Fix available8.8 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreSandbox escape in the Storage: IndexedDB componentCVE-2026-2768Fix available10.0 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreUse-after-free in the JavaScript: WebAssembly componentCVE-2026-2767Fix available9.8 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreUse-after-free in the JavaScript Engine: JIT componentCVE-2026-2766Public exploitFix available9.8 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreUse-after-free in the JavaScript Engine componentCVE-2026-2765Fix available9.8 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreJIT miscompilation, use-after-free in the JavaScript Engine: JIT componentCVE-2026-2764Public exploitFix available9.8 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreUse-after-free in the JavaScript Engine componentCVE-2026-2763Public exploitFix available9.8 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreInteger overflow in the JavaScript: Standard Library componentCVE-2026-2762Fix available9.8 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreSandbox escape in the Graphics: WebRender componentCVE-2026-2761Fix available10.0 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreSandbox escape due to incorrect boundary conditions in the Graphics: WebRender componentCVE-2026-2760Fix available10.0 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreIncorrect boundary conditions in the Graphics: ImageLib componentCVE-2026-2759Fix available9.8 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreUse-after-free in the JavaScript: GC componentCVE-2026-2758Fix available9.8 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreIncorrect boundary conditions in the WebRTC: Audio/Video componentCVE-2026-2757Fix available9.8 Critical
- red hat directory server 11.5 e4s for rhel 8, directory server 11.7 e4s for rhel 8, directory server 11.9 for rhel 8 +23 more +25 more389-ds-base: 389-ds-base: remote code execution and denial of service via heap buffer overflowCVE-2025-14905Fix available7.2 High
- gimp, red hat enterprise linux 6, enterprise linux 7 +14 more +16 moreGIMP XWD File Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityCVE-2026-2048Fix available7.8 High
- gimp, red hat enterprise linux 6, enterprise linux 7 +14 more +16 moreGIMP XWD File Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityCVE-2026-2045Fix available7.8 High
- gimp, red hat enterprise linux 6, enterprise linux 7 +14 more +16 moreGIMP PGM File Parsing Uninitialized Memory Remote Code Execution VulnerabilityCVE-2026-2044Fix available7.8 High
- gimp, red hat enterprise linux 6, enterprise linux 7 +11 more +13 moreGIMP HDR File Parsing Heap-based Buffer Overflow Remote Code Execution VulnerabilityCVE-2026-2050Fix available7.8 High
- mozilla firefox, thunderbird, red hat ai inference server 3.3 +18 more +20 moreHeap buffer overflow in libvpxCVE-2026-2447Fix available8.8 High
- linux, linux kernel, red hat enterprise linux 10 +13 more +15 morenetfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate()CVE-2026-23111Public exploitFix available7.8 High
- postgresql, red hat enterprise linux 10, enterprise linux 10.0 extended update support +18 more +20 morePostgreSQL missing validation of multibyte character length executes arbitrary codeCVE-2026-2006Fix available8.8 High
- postgresql, red hat enterprise linux 10, enterprise linux 10.0 extended update support +18 more +20 morePostgreSQL pgcrypto heap buffer overflow executes arbitrary codeCVE-2026-2005Public exploitFix available8.8 High
- postgresql, red hat enterprise linux 10, enterprise linux 10.0 extended update support +18 more +20 morePostgreSQL intarray missing validation of type of input to selectivity estimator executes arbitrary codeCVE-2026-2004Fix available8.8 High
- apple ipados, macos, safari +19 more +21 moreThe issue was addressed with improved memory handling. This issue is fixed in macOS Tahoe 26.3,...CVE-2026-20644Fix available6.5 Medium
- apple ipados, macos, safari +19 more +21 moreThe issue was addressed with improved memory handling. This issue is fixed in macOS Tahoe 26.3,...CVE-2026-20652Fix available7.5 High
- apple ipados, macos, safari +19 more +21 moreThis issue was addressed through improved state management. This issue is fixed in macOS Tahoe 26...CVE-2026-20608Fix available5.5 Medium
- apple ipados, macos, safari +21 more +23 moreThe issue was addressed with improved memory handling. This issue is fixed in watchOS 26.3, tvOS...CVE-2026-20635Fix available4.3 Medium
- apple ipados, macos, safari +19 more +21 moreThe issue was addressed with improved memory handling. This issue is fixed in iOS 26.3 and iPadOS...CVE-2026-20636Fix available6.5 Medium
- gimp, red hat enterprise linux 6, enterprise linux 7 +14 more +16 moreGIMP ICO File Parsing Heap-based Buffer Overflow Remote Code Execution VulnerabilityCVE-2026-0797Fix available7.8 High
- cryptography.io cryptography, red hat openshift lightspeed, advanced cluster management for kubernetes 2 +23 more +25 morecryptography Subgroup Attack Due to Missing Subgroup Validation for SECT CurvesCVE-2026-26007Fix available8.2 High
- libpng, red hat ai inference server 3.3, build of openjdk 1.8 +34 more +36 moreLIBPNG has a heap buffer overflow in png_set_quantizeCVE-2026-25646Fix available8.3 High
- dun munge, debian linux, red hat ai inference server 3.3 +16 more +18 moreMUNGE has a buffer overflow in message unpacking allows key leakage and credential forgeryCVE-2026-25506Fix available7.7 High
- red hat cert manager support for red hat openshift release 1.18, ai inference server 3.2, ai inference server 3.3 +23 more +25 moreGnutls: gnutls: denial of service via excessive resource consumption during certificate verificationCVE-2025-14831Fix available5.3 Medium
- go toolchain cmd/cgo, golang go, red hat enterprise linux 10 +31 more +33 morePotential code smuggling via doc comments in cmd/cgoCVE-2025-61732Fix available8.6 High
- red hat enterprise linux 10, enterprise linux 10.0 extended update support, enterprise linux 6 +16 more +18 moreLibsoup: stack-based buffer overflow in libsoup multipart response parsingmultipart http responseCVE-2026-1761Fix available8.6 High
- grafana, grafana grafana/grafana, grafana/grafana-enterprise +12 more +14 moreDashboard Permissions Scope Bypass Enables Cross‑Dashboard Privilege EscalationCVE-2026-21721Public exploitFix available8.1 High
- openssl, red hat cost management 4, ai inference server 3.2 +316 more +318 moreStack buffer overflow in CMS (Auth)EnvelopedData parsingCVE-2025-15467Public exploitFix availableEPSS 74.8%8.8 High
- google protobuf, red hat ai inference server 3.2, ai inference server 3.3 +14 more +16 moreDenial of Service in Python ProtobufCVE-2026-0994Public exploitFix available8.2 High
- pypa wheel, red hat discovery 2 for rhel 10, discovery 2 for rhel 8 +57 more +59 morewheel Allows Arbitrary File Permission Modification via Path TraversalCVE-2026-24049Public exploitFix available7.1 High
- lodash, lodash lodash-amd, lodash-es +119 more +121 morePrototype Pollution Vulnerability in Lodash _.unset and _.omit functionsCVE-2025-13465Public exploitFix available6.9 Medium
- oracle graalvm, graalvm for jdk, jdk +32 more +34 moreVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition...CVE-2026-21945Fix available7.5 High
- freerdp, red hat enterprise linux 10, enterprise linux 10.0 extended update support +16 more +18 moreHeap-use-after-free in gdi_set_boundsCVE-2026-23884Fix available7.7 High
- Show moreLoading…